Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13 results
GHunt preview

GHunt

GitHubmxrch/ghunt

Async offensive Google framework for OSINT, enabling email/Gaia ID/Drive/geolocation reconnaissance via CLI or Python library with JSON export.

email-harvestinginformation-gatheringosint+4
19.5k
4 months ago
LangAlpha preview

LangAlpha

GitHubginlix-ai/langalpha

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

crawlerdata-exfiltrationinformation-gathering+6
1.7k3 days ago
sn0int preview

sn0int

GitHubkpcyrd/sn0int

Semi-automatic OSINT framework and package manager

dns-analysisemail-harvestinginformation-gathering+5
2.5k3 months ago
bof preview

bof

GitHuborange-cyberdefense/bof

BOF (Boiboite Opener Framework) is a testing framework for industrial protocols implementations and devices.

exploitationfuzzinginformation-gathering+6
533 years ago
recon preview
Archived

recon

GitHubpownjs/recon

A powerful target reconnaissance framework powered by graph theory.

dns-analysisinformation-gatheringnetwork-mapping+7
4203 years ago
GOSINT preview
Archived

GOSINT

GitHubciscocsirt/gosint

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).

information-gatheringioc-managementosint+3
5603 years ago
One-Lin3r preview

One-Lin3r

GitHubd4vinci/one-lin3r

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

exploitationinformation-gatheringpayload-generation+4
1.8k8 months ago
recog preview

recog

GitHubrapid7/recog

Pattern recognition for hosts, services, and content

information-gatheringnetwork-mappingosint+4
79012 days ago
Lucifer preview

Lucifer

GitHubskiller9090/lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build…

data-exfiltrationinformation-gatheringpenetration-testing+4
3785 years ago
Redeye preview

Redeye

GitHubredeye-framework/redeye

Collaborative pentest data management platform for organizing servers, users, vulnerabilities, attack vectors, and files with API access and graph…

information-gatheringpenetration-testingpenetration-testing-frameworks+2
4733 years ago
Alfred preview
Archived

Alfred

GitHubpwnfuzz/alfred

WIP - Revamped Alfred [2.0]

exploitationinformation-gatheringpenetration-testing+4
401 year ago
golismero preview
Archived

golismero

GitHubgolismero/golismero

GoLismero - The Web Knife

dns-analysisinformation-gatheringpenetration-testing-frameworks+5
8875 years ago
ShadowClone preview

ShadowClone

GitHubfyoorer/shadowclone

Serverless task distribution framework that parallelizes CLI tools across thousands of cloud functions for rapid reconnaissance and data processing.

cloud-securityreconnaissanceserverless-security+1
8211 year ago